CVE-2019-5542: VMware Fusion

High severity, CVSS 7.7. EPSS: 0.9% chance of exploitation in the next 30 days.

VMware Workstation (15.x before 15.5.1) and Fusion (11.x before 11.5.1) contain a denial-of-service vulnerability in the RPC handler. Successful exploitation of this issue may allow attackers with normal user privileges to create a denial-of-service condition on their own VM.

Affected products

• VMware Fusion: from 11.0.0, before 11.5.1 (fixed in 11.5.1)
• VMware Workstation: from 15.0.0, before 15.5.1 (fixed in 15.5.1)

Published 2019-11-20. Last modified 2026-06-17.